Page 1 Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 2 , Aruba Networks®, Aruba Wireless Networks®, the registered Aruba the Mobile Edge Company logo, and Aruba Mobility Management System®. Dell™, the DELL™ logo, and PowerConnect™ are trademarks of Dell Inc. All rights reserved. Specifications in this manual are subject to change without notice.
Page 3: Table Of Contents
Assigning an IP Address to the W-IAP Connecting to a Provisioning Wi-Fi Network Disabling the Provisioning Wi-Fi Network Assigning a Static IP Log in to the Dell W-Series Instant UI Specifying a Country Code W-IAP Cluster Dell W-Instant User Interface...
Page 4 Overview (Device list) Channel Utilization and Monitoring Channel Details Alerts Client Alerts Fault History Active Faults Configuration AirGroup Language Dell PowerConnect W-AirWave Setup Pause/Resume Views Wireless Network Network Types Employee Network Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Contents...
Page 5 Changing IP Address of the W-IAP Configuring Adaptive Radio Management Configuring Uplink Management VLAN Configuring Wired Bridging on Ethernet 0 Migrating to a Dell PowerConnect W-Series Mobility Controller Managed Network Converting a W-IAP to RAP Mode Converting a W-IAP to CAP Contents Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0...
Page 6 Converting a W-IAP to Standalone Mode Converting Back to a W-IAP Rebooting the W-IAP Firmware Image Server in Cloud Network Upgrade Using Dell PowerConnect W-AirWave and Image Server Image Management Using Cloud Server Image Management Using Dell PowerConnect W-AirWave Automatic Firmware Image Check and Upgrade...
Page 7 Configuring External Captive Portal Authentication when Editing a Guest Network External Captive Portal Authentication using ClearPass Guest Creating a Web Login page in the ClearPass Guest Configuring the RADIUS Server in Instant WISPr Authentication Configuring WISPr Authentication Contents Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 8 Configuring MAC + 802.1X Authentication MAC + Captive Portal Authentication Configuring MAC + Captive Portal Authentication Wired Authentication on a W-IAP Certificates Loading Certificates using Dell W-Series Instant UI Loading Certificates using Dell PowerConnect W-AirWave Encryption Encryption Types Supported in Dell W-Instant TKIP...
Page 9 Band Steering Mode Airtime Fairness Mode Airtime Fairness Modes Access Point Control Customize Valid Channels Min Transmit Power Max Transmit Power Client Aware Scanning Wide Channel Bands Monitoring the Network with ARM Contents Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 10 Provisioning a 3G/4G Switch Network Wi-Fi Uplink Provisioning Wi-Fi Uplink Provisioning 3G/4G and Wi-Fi Uplink with Factory Setting Uplink Management Enforce Uplink Uplink Preemption Uplink Switchover Uplink Switching Based on VPN Status Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Contents...
Page 11 Image Management W-IAP and Client Monitoring Template-based Configuration Trending Reports Intrusion Detection System Wireless Intrusion Detection System (WIDS) Event Reporting to Dell PowerConnect W-AirWave RF Visualization Support for Dell W-Instant Configuring Dell PowerConnect W-AirWave Creating your Organization String About Shared Key Entering the Organization String and AMP Information into the W-IAP Dell PowerConnect W-AirWave ...
Page 12 IDS Link Network View Info Usage Trends Dell W-Instant Access Point View Info RF Dashboard Overview Client View Info RF Dashboard RF Trends Mobility Trail Alert Types and Management Alert Types Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Contents...
Page 13 DHCP Server Configuration NAT DHCP Configuration Distributed L2 DHCP Configuration Distributed L3 DHCP Configuration Centralized L2 DHCP Configuration User Database Adding a User Editing User Settings Deleting a User Regulatory Domain Contents Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 14 Country Codes List Controller Configuration for VPN Whitelist DB Configuration VPN Local Pool Configuration W-IAP VPN Profile Configuration Dell PowerConnect W-ClearPass Configuration for AirGroup Dell PowerConnect W-ClearPass Setup Testing Troubleshooting IAP-VPN Licensing Requirements VPN Configuration Creating a W-IAP Whitelist Controller Whitelist DB...
Page 15: About This Guide
LAN (WLAN) that combines affordability and configuration simplicity. Dell W-Instant is a simple, easy to deploy turn-key WLAN solution consisting of one or more access points. An Ethernet port with routable connectivity to the Internet or a self-enclosed network, is used to deploy an Instant Wireless Network.
Page 16: Intended Audience
Intended Audience This guide is intended for customers who configure and use Dell W-Instant. Conventions The following conventions are used throughout this manual to emphasize important concepts: - Conventions Table 1 Type Style Description This style is used to emphasize important...
Page 17: Initial Configuration
Chapter 2 Initial Configuration This section provides information required to setup Dell W-Instant and access the Dell W-Series Instant User Interface. Initial Setup This section provides a pre-installation checklist and describes the initial procedures required to set up Dell W-Instant.
Page 18: Connecting A W-Iap
"Assigning an IP Address to the W-IAP" on page 18 "Connecting to a Provisioning Wi-Fi Network" on page 18 "Log in to the Dell W-Series Instant UI" on page 21 "Specifying a Country Code " on page 21 — Skip this step if you are installing the W-IAP in the United States or Japan.
Page 19 - Connecting to a provisioning Wi-Fi Network — Microsoft Windows Figure 1 - Connecting to a provisioning Wi-Fi Network — Mac OS Figure 2 Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Initial Configuration...
Page 20: Disabling The Provisioning Wi-Fi Network
255.255.255.0 apboot> setenv gatewayip 10.1.1.254 apboot> save Saving Environment to Flash... Un-Protected 1 sectors .done Erased 1 sectors Writing Use the printenv command to view the configuration. apboot> printenv Initial Configuration Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 21: Log In To The Dell W-Series Instant Ui
When you use a provisioning Wi-Fi network to connect to the Internet, all browser requests are directed to the Dell W-Series Instant UI. For example, if you enter www.example.com in the address field, you are directed to the Instant user interface. You can change the default login credentials after you log in for the first time.
Page 22: W-Iap Cluster
CAUTION: Moving a W-IAP from one cluster to another requires a factory reset of the W-IAP "Managing W-IAPs" on page 71 that is being moved. See for more information Initial Configuration Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 23: Dell W-Instant User Interface
Chapter 3 Dell W-Instant User Interface The Dell W-Series Instant User Interface (UI) provides a standard web based interface that allows you to configure and monitor a Wi-Fi network. It is accessible through a standard web browser from a remote management console or workstation. JavaScript must be enabled on the web browser to view the Dell W-Series Instant UI.
Page 24: Banner
Banner The banner is a horizontal grey rectangle that appears at the top left corner of the Dell W-Series Instant UI. It displays the company name, logo, and Virtual Controller's name. Search Administrators can search a W-IAP, client, or a network using a simple Search window in the Dell W-Series Instant UI.
Page 25: Access Points Tab
Access Points Tab If the Auto Join Mode feature is enabled, a list of enabled and active W-IAPs in the Dell W- Instant network is displayed in the Access Points tab. The W-IAP names are displayed as links. If the Auto Join Mode feature is disabled, a New link appears. Click on this link to add a new W- IAP to the network.
Page 26: Links
"Alerts" on page 37 "IDS" on page 39 "Configuration" on page 39 "AirGroup" on page 40 "Language" on page 40 "Dell PowerConnect W-AirWave Setup" on page 40 "Pause/Resume" on page 41 Dell W-Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0...
Page 27: New Version Available
New Version Available This link appears in the top right corner of Dell W-Series Instant UI only if a new image version is available on the image server and Dell PowerConnect W-AirWave is not configured. For more information about the New version available link and its functions, see "Firmware Image Server in...
Page 28 Specify the IP address and port number of the AeroScout server, to which location reports should be sent. Include unassociated stations— Enable this option to send mobile unit reports to the Aeroscout and the Dell RTLS servers for the client stations that are not associated to any W- IAP (unassociated stations). Figure 10 - RTLS SNMP—...
Page 29 Radio — View or configure radio settings for 2.4 GHz and the 5 GHz radio profiles. For information about Radio, see "Configuring Radio Profiles in Instant" on page 173. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Dell W-Instant User Interface...
Page 30: Pef
Use this window to specify desired levels of threat detection. See "Rogue AP Detection and Classification" on page 177 for more information. Dell W-Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 31: Vpn
- VPN - Default View Figure 14 Wired Specify the desired profile for each port of the W-IAP. See "Ethernet Downlink" on page 187 more information. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Dell W-Instant User Interface...
Page 32: Maintenance
289. Help The Help link at the top right corner of the Dell W-Series Instant UI allows you to view a short description or definition of selected terms and fields in the Dell W-Series Instant UI. To activate the context-sensitive help: 1.
Page 33: Logout
Use this link to logout of the Dell W-Series Instant UI. Monitoring This link displays the Monitoring pane. This pane can be used to monitor the Dell W-Instant network. Use the down arrow located to the right side of these links to compress or expand the monitoring pane.
Page 34: Rf Dashboard
IAP configuration information is displayed in the Info section. The RF Dashboard section is pushed to the bottom left corner of the Dell W-Series Instant UI. The RF Trends section appears in its place. This section consists of the Utilization, Band frames, Noise Floor, and Errors graphs.
Page 35: Usage Trends
Virtual Controller in the last 15 minutes. In the Network or W-IAP view, this graph displays the incoming and outgoing throughput traffic for the selected network or W-IAP in the last 15 minutes. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 36: Spectrum
Wi-Fi interferers and Wi-Fi devices. The remaining air time is available for use. The second bar indicates the channel quality. A higher percentage value indicates better quality. Dell W-Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 37: Channel Details
Description— Provides a short description of the alert. Access Points— Displays the IP address of the W-IAP to which the client is connected. Details— Provides complete details of the alert. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Dell W-Instant User Interface...
Page 38: Fault History
Number— Indicates the number of sequence. Description— Displays the event details. - Active Faults Figure 25 For more information about alerts, see "Alert Types and Management" on page 249. Dell W-Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 39: Ids
- Intrusion Detection on Instant UI Figure 26 Configuration This link provides an overall view of your Virtual Controller configuration. Click on each of the features to view or edit the settings. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Dell W-Instant User Interface...
Page 40: Airgroup
The language links are provided in the login screen to allow users to select the preferred language before logging in to the Dell W-Series Instant UI. In addition, this link is also located at the bottom left corner of the Dell W-Series Instant UI. A default language is selected based on the language preferences in the client desktop operating system or browser.
Page 41: Pause/Resume
Configuration Pause/Resume The Pause/Resume link is located at the bottom right corner of the Dell W-Series Instant UI. The Dell W-Series Instant UI is automatically refreshed after every 15 seconds by default. Click the Pause link to pause the automatic refreshing of the Dell W-Series Instant UI. When the automatic Dell W-Series Instant UI refreshing is paused, the Pause link changes to Resume.
Page 42 Clients tab. Click the IP address of the client that you want to monitor. Client view for that client appears. For more information on the graphs and the views, see "Monitoring" on page 229. Dell W-Instant User Interface Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 43: Wireless Network
2. Connection— After successful authentication, the client establishes a connection with the W- IAP. Network Types Dell W-Instant wireless networks are categorized as: "Employee Network" on page 44 "Voice Network" on page 53 "Guest Network" on page 60 NOTE: When a client is associated to the Voice network, all data traffic is marked and placed into the high priority queue in QoS (Quality of Service).
Page 44: Employee Network
An Employee network is a classic Wi-Fi network. This network type is supported with full customization on Dell W-Instant. It is used by the employees in the organization. Passphrase based or 802.1X based authentication methods are supported on this network type. Employees can access the protected data of an enterprise through the employee network after successful authentication.
Page 45 Transmit Rates— Indicates the ability to configure the basic and supported rates per SSID for Dell W-Instant. Select to set the minimum and maximum legacy (non-802.11n) transmit rates for each band — 2.4 GHz and 5 GHz. d. Miscellaneous Content filtering—...
Page 46 NOTE: Select the Static option in the Client VLAN assignment section to configure VLAN "VLAN Pooling" on page 69 pooling. See additional details. 6. Click Next to continue. Wireless Network Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 47 "External RADIUS Server" on page 112. 3. Authentication server 1— Select the required Authentication server option from the drop-down list. Available options are: New— If you select this option, an Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Wireless Network...
Page 48 See "Certificates" on page 138 more information. Perform the following steps: You want to use the default security level, Personal 1. Select the required key options from the Wireless Network Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 49 8. Accounting interval — When set to a value greater than zero, the Access Point periodically posts accounting information as RADIUS INTERIM accounting records to the RADIUS server. 9. Blacklisting— Select Enabled to enable Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Wireless Network...
Page 50 "Adding a User" on page 269. NOTE: Navigate to PEF > Blacklisting in the Dell W-Series Instant UI to specify the duration of the blacklisting on the Blacklisting tab of the PEF window. 12. Click Upload Certificate and browse to upload a certificate file for the internal "Certificates"...
Page 51 The maximum value for this entry is 10. NOTE: Navigate to PEF > Blacklisting in the Dell W-Series Instant UI to specify the duration of the blacklisting on the Blacklisting tab of the PEF window. 8. Internal server— If you select this option,...
Page 52 2. Unrestricted— Select this to set no restrictions on access based on destination or type of traffic. 13. Click Finish. The network is added and listed in the Networks tab. Wireless Network Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 53: Voice Network
- Adding a Voice Network— WLAN Settings Tab Figure 36 2. In the WLAN Settings tab, perform the following steps: a. Name (SSID)— Enter a name that uniquely identifies a wireless network. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Wireless Network...
Page 54 Transmit Rates— Indicates the ability to configure the basic and supported rates per SSID for Dell W-Instant. Select to set the minimum and maximum legacy (non-802.11n) transmit rates for each band — 2.4 GHz and 5 GHz.
Page 55 7. Slide and select the appropriate security levels in the Security tab. The default level is Personal. The available options are Enterprise, Personal, and Open which are described in the following tables. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 56 Authentication server option from the drop-down list. Available options are: New— If you select this option, then an external RADIUS server has to be configured to authenticate the users. For Wireless Network Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 57 The maximum value for this entry is 10. NOTE: Navigate to PEF > Blacklisting in the Dell W-Series Instant UI to specify the duration of the blacklisting on the Blacklisting tab of the PEF window. Perform the following steps: 1.
Page 58 The maximum value for this entry is 10. NOTE: Navigate to PEF > Blacklisting in the Dell W-Series Instant UI to specify the duration of the blacklisting on the Blacklisting tab of the PEF window. 12. InternalServer— If you select this option,...
Page 59 The maximum value for this entry is 10. NOTE: Navigate to PEF > Blacklisting in the Dell W-Series Instant UI to specify the duration of the blacklisting on the Blacklisting tab of the PEF window. 8. InternalServer— If you select this option,...
Page 60: Guest Network
Typically, a guest network is an un-encrypted network. However, you can specify encryption settings in the Security tab. Adding a Guest Network This section provides the procedure to add a guest network. Wireless Network Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 61 W-IAP converts multicast streams into multicast unicast streams as long as the channel utilization does not exceed this threshold. The default value is 90 and the maximum threshold value is 100%. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 62 Transmit Rates— Indicates the ability to configure the basic and supported rates per SSID for Dell W-Instant. Select to set the minimum and maximum legacy (non-802.11n) transmit rates for each band — 2.4 GHz and 5 GHz.
Page 63 10. 5. For Internal users —Click Users to populate the system’s internal authentication server with users. For information about adding a user, see "Adding a User" on page 269. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Wireless Network...
Page 64 New— If you select this option, then an external RADIUS server has to be configured to authenticate the users. For information on configuring an external RADIUS server, see "Configuring an External RADIUS Server" on page 113. Wireless Network Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 65 2. Blacklisting— Select Enabled to enable blacklisting of the clients with a specific number of authentication failures. 3. Max authentication failures— Users who fail to authenticate the number of times specified here are dynamically Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Wireless Network...
Page 66 Passphrase format — Specify either an alphanumeric or a hexadecimal string. Ensure that the hexadecimal string must be exactly 64 digits in length. c. Passphrase — Enter a pre-shared key (PSK) passphrase. Wireless Network Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 67 Role-based— Select Role-based if you want to specify per-user access rules. See "Creating a New User Role" on page 145 for more information. Unrestricted— Select this to set no restrictions on access based on destination or type of traffic. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Wireless Network...
Page 68: Editing A Network
16 SSIDs. After you enable this option, the number of SSIDs that become active on each W-IAP depends on the W-IAP platform. NOTE: Enabling the Extended SSID option disables mesh. Wireless Network Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 69: Enabling The Extended Ssid Option
Enabling the Extended SSID Option To enable the extended SSID option: 1. Click the Settings link at the upper right corner of the Dell W-Series Instant UI. 2. Click the Show advanced options link. 3. In the General tab, select Enabled from the Extended SSID drop-down list.
Page 70 Wireless Network Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 71: Managing W-Iaps
W-IAPs, editing the W-IAP settings, and upgrading the firmware on the W-IAP using the Dell W-Series Instant UI. Preferred Band At the top right corner of Dell W-Series Instant UI, click the Settings link. The Settings window appears. 1. In the Settings window, click the General tab.
Page 72: Terminal Access
NOTE: The LED display is always in Enabled mode while rebooting the W-IAP. TFTP Dump Server Enter the IP address of a TFTP server to store core dump files. Managing W-IAPs Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 73: Extended Ssid
Syslog Server To specify a Syslog Server for sending syslog messages to the external servers, navigate to Settings > click Show advanced options > Syslog Server in the Dell W-Series Instant UI and update the following fields. Syslog server— Enter the IP address of the server to send system logs to.
Page 74: Syslog Facility Levels
Messages containing information useful for debugging. Adding a W-IAP to the Network To add a W-IAP to the Dell W-Instant network, assign an IP address. For more information, see "Assigning an IP Address to the W-IAP" on page After a W-IAP is connected to the network, if the Auto Join Mode feature is enabled, it is listed in the Access Points tab in the Dell W-Series Instant UI.
Page 75: Removing A W-Iap From The Network
2. Click x to confirm the deletion. NOTE: The deleted W-IAP(s) cannot join the W-Instant network anymore and no longer appear in the Dell W-Series Instant UI. However, the master W-IAP cannot be deleted from the Virtual Controller. Editing W-IAP Settings...
Page 76: Changing Ip Address Of The W-Iap
3. Edit the W-IAP name in the Name text box. 4. Click OK. Changing IP Address of the W-IAP The Dell W-Series Instant UI allows you to change the IP address of the W-IAP connected to the network. To change the IP address of the W-IAP: 1.
Page 77 Enter the IP address of the default gateway in the Default gateway text box. d. Enter the IP address of the DNS server in the DNS server text box. e. Enter the domain name in the Domain name text box. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 78: Configuring Adaptive Radio Management
4. Click OK and reboot the W-IAP. Configuring Adaptive Radio Management Adaptive Radio Management (ARM) is enabled in Dell W-Instant by default. However, if ARM is disabled, perform the following steps to enable it. 1. In the Access Points tab, click the W-IAP for which you want to configure ARM.
Page 79: Configuring Uplink Management Vlan
2. Click the edit link. An Edit AP window appears. 3. In the Edit AP window, select the Uplink tab. 4. Select Enable from the Eth0 Bridging drop box. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Managing W-IAPs...
Page 80: Migrating To A Dell Powerconnect W-Series Mobility Controller Managed Network
IAPs. The Virtual Controller along with the other slave W-IAPs then setup a VPN tunnel to the remote controller, and download the firmware by FTP. The Virtual Controller uses IPsec to communicate to the Dell PowerConnect W-Series Mobility Controller over the Internet. If the W-IAP obtains AirWave information via DHCP (Option 43 and Option 60), it establishes an HTTPS connection to the AirWave server and downloads the configuration and operates in W-IAP mode.
Page 81 3.2 or later To convert a W-IAP to RAP, follow the instructions below: 1. Navigate to the Maintenance tab in the top right corner of the Dell W-Series Instant UI. 2. Click the Convert tab. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0...
Page 82 NOTE: Ensure the Mobility Controller IP Address is reachable by the W-IAPs. 5. Click Convert Now to complete the conversion. - Confirm Access Point Conversion Figure 56 6. The W-IAP reboots and begins operating in RAP mode. Managing W-IAPs Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 83: Converting A W-Iap To Cap
Converting a W-IAP to CAP To convert a W-IAP to Campus AP, do the following: 1. Navigate to the Maintenance tab in the top right corner of the Dell W-Series Instant UI. 2. Click the Convert tab. - Converting a W-IAP to CAP Figure 57 3.
Page 84: Converting Back To A W-Iap
3. Select Standalone AP from the drop-down list. 4. Select the Access Point from the drop-down list. 5. Click Convert Now to complete the conversion. 6. After the conversion the Access Point specified in the Dell W-Series Instant UI operates in standalone mode. Converting Back to a W-IAP The reset button located on the rear of a ...
Page 85 4. The Confirm Reboot for W-IAP window appears. Click Reboot Now to proceed. - Confirm Reboot message Figure 60 5. The Reboot in Progress message appears indicating that the reboot is in progress. Figure 61 - Reboot In Progress Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Managing W-IAPs...
Page 86: Firmware Image Server In Cloud Network
Dell Networks. The location of the image server is fixed and cannot be changed by the user. Dell takes care of managing the image server, and ensures that the image server is loaded with latest versions of W-Instant software for its products.
Page 87: Automatic Firmware Image Check And Upgrade
If the image check locates a new version of the W-Instant software on the image server, then a New version available link appears at the top right corner of the Dell W-Series Instant UI. - Automatic Image Check — New Version Available Link...
Page 88: Upgrading To New Version
To manually check for a new firmware image version: Manual 1. Navigate to Maintenance > Firmware to select and manually upgrade the image file. - Single class or Multi-class W-IAPNetworks Firmware Upgrade Figure 65 Managing W-IAPs Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 89 URL for W-IAP135/134: tftp://<IP-address>/DellInstant_Cassiopeia_6.2.0.0-3.2.0.0_xxxx URL for W-IAP105/92/93: tftp://<IP-address>/DellInstant_Orion_6.2.0.0-3.2.0.0_xxxx URL for W-IAP108/109: tftp://<IP-address>/DellInstant_Pegasus_6.2.0.0-3.2.0.0_xxxx FTP: ftp://<IP-address>/DellInstant_Cassiopeia_6.2.0.0-3.2.0.0_xxxx ftp://<IP-address>/DellInstant_Orion_6.2.0.0-3.2.0.0_xxxx ftp://<IP-address>/DellInstant_Pegasus_6.2.0.0-3.2.0.0_xxxx HTTP: http://<IP-address>/DellInstant_Cassiopeia_6.2.0.0-3.2.0.0_xxxx http://<IP-address>/DellInstant_Orion_6.2.0.0-3.2.0.0_xxxx http://<IP-address>/DellInstant_Pegasus_6.2.0.0-3.2.0.0_xxxx 2. Click Upgrade Now to upgrade the W-IAP to the newer version. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Managing W-IAPs...
Page 90: Automatic
Automatic 1. Click Check for New Version to automatically check for images on the Dell image server in the cloud. The field is replaced with the Image Check in Progress message. After the image check is completed, one of the following messages appears: No new version available—...
Page 91: Layer-3 Mobility
Virtual Controller IP addresses across which L3 mobility is supported. Overview Dell W-Instant Layer-3 mobility solution defines a Mobility Domain as a set of Instant networks, with same WLAN access parameters, across which client roaming is supported. The W-Instant network to which the client first connects is called its home network.
Page 92: Configuring A Mobility Domain
IP address and L3 roaming is immediately set up. Perform the following steps to configure a mobility domain: 1. Click the Settings link at the upper right corner of the Dell W-Series Instant UI. 2. Click the Show advanced options link and then click L3 Mobility.
Page 93 Enter the VLAN ID in the home network in the VLAN ID text box. d. Enter the home VC IP address for this subnet in the Virtual Controller IP text box. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 94 - Add Subnets Information Figure 69 6. Click OK. Figure 70 - Example Layer-3 Configuration Layer-3 Mobility Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 95: Home Agent Load Balancing
1. Click the Settings link at the upper right corner of the Instant UI. 2. Click the Show advanced options link and then click L3 Mobility. 3. Select Enabled from the Home agent load balancing drop-down list. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 96 Layer-3 Mobility Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 97: Spectrum Monitor
Follow the procedure below to convert W-IAPs in an Dell W-Instant network to hybrid mode: 1. Click the RF link at the top right corner of the Dell W-Series Instant UI. 2. Click Show advanced options to view the Radio tab.
Page 98: Converting A W-Iap To A Spectrum Monitor
2. Click the edit link. The Edit Access Point window appears. 3. Click the Radio tab. 4. From the Access Mode drop-down list, select Spectrum Monitor. 5. Click OK. 6. Reboot the W-IAP for the changes to take effect. Spectrum Monitor Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 99 7. To enable spectrum monitoring for any other band for the 5 GHz radio: a. Click the RF link at the upper right corner of the Dell W-Series Instant UI. b. Click Show advanced options to view the Radio tab.
Page 100: Spectrum Data
The spectrum data is collected by each W-IAP spectrum monitor and hybrid AP. The spectrum data is not reported to the VC. The Spectrum link is visible in the Dell W-Series Instant UI (Access Point view) only if you have enabled the spectrum monitoring feature. You can view the following spectrum data in the Dell W-Series Instant UI: "Overview - Device List"...
Page 101: Non Wi-Fi Interferers
Fixed Some audio devices such as wireless speakers and microphones also use Frequency fixed frequency to continuously transmit audio. These devices are classified (Audio) as Fixed Frequency (Audio). Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Spectrum Monitor...
Page 102 Microwave (Inverter). Any non-frequency hopping device that does not fall into one of the other Generic categories described in this table is classified as a Generic Interferer. For Interferer Spectrum Monitor Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 103: Channel Metrics
A 2.4 GHz or 5 GHz radio channel. Current relative quality of selected channels in the 2.4 GHz or 5 GHz radio Quality(%) bands, as determined by the percentage of packet retries, the current Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Spectrum Monitor...
Page 104: Channel Details
Type Device type. The percentage of the channel currently being used by non Wi-Fi Total nonwifi (%) devices. Known APs Number of valid APs identified on the radio channel. Spectrum Monitor Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 105: Spectrum Alerts
When new non Wi-Fi device is found, an alert is reported to the Virtual Controller. The spectrum alert messages include the device ID, device type, IP address of the spectrum monitor or hybrid AP, and the timestamp. Virtual Controller reports the detailed device information to AMP. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 106 Spectrum Monitor Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 107: Time Management
Network Time Protocol (NTP) is required to obtain the precise time from a server and to regulate the local time in each network element. If NTP server is not configured in the Dell W-Instant network, a W-IAP reboot may lead to variation in time and data.
Page 108: Daylight Saving Time
To enable the Daylight Saving Time on Dell W-Instant, perform the following steps. 1. Navigate to the Settings tab in the top right corner of the Dell W-Series Instant UI. 2. In the General tab, select the check box besides the Daylight Saving Time. If the Time Zone selected does not support DST, the Daylight Saving Time option does not appear.
Page 109: Virtual Controller
The Master Election Protocol prefers the W-Instant AP (W-IAP) with non-default IP, when electing a VC for the Dell W-Instant network during initial startup. If there are more than one W- IAPs with non-default IPs in the network, all W-IAPs with default IP will automatically reboot and the DHCP process is used to assign new IP addresses.
Page 110: Virtual Controller Ip Address
Virtual Controller IP Address You can specify a single static IP address that can be used to manage a multi-AP Dell W-Instant network. This IP address is automatically provisioned on a shadow interface on the W-IAP that takes the role of a Virtual Controller. When a W-IAP becomes a Virtual Controller, it sends three Address Resolution Protocol (ARP) messages with the static IP address and its own MAC address to update the network ARP cache.
Page 111: Authentication
NOTE: A NAS acts as a gateway to guard access to a protected resource. A client connecting to the wireless network first connects to the NAS. The Dell W-Instant network supports internal RADIUS server and external RADIUS server for 802.1X authentication.
Page 112: Internal Radius Server
LEAP— Lightweight Extensible Authentication Protocol (LEAP) uses dynamic WEP keys for authentication between the client and authentication server. NOTE: Dell does not recommend to use the LEAP authentication method because it does not provide any resistance to network attacks. External RADIUS Server In the external RADIUS server, the IP address of the Virtual Controller is configured as the NAS IP address.
Page 113: Configuring An External Radius Server
Authorization (CoA) and Disconnect messages from the RADIUS server. Disconnect messages cause a user session to be terminated immediately, whereas CoA messages modify session authorization attributes such as data filters. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 114 Figure 79 6. Click OK after updating the fields. 7. Reauth interval — When set to a value greater than zero, the Access Points periodically reauthenticate all associated and authenticated clients. Authentication Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 115: Enabling Radius Server Support
The maximum value for this entry is 10. 9. Navigate to PEF > Blacklisting in the Dell W-Series Instant UI to specify the duration of the blacklisting on the Blacklisting tab of the PEF window.
Page 116 W-IAP is no longer able to reach the Dell PowerConnect W-ClearPass Policy Manager. Here, the W-IAP will terminate and complete the EAP authentication using the cached credentials information.
Page 117 Figure 83 depicts a situation when the CPPM link is reachable again. The W-IAP will send the RADIUS-Request message to the CPPM server directly for client authentication. - 802.1X Authentication when Dell PowerConnect W-ClearPass Policy Manager is Figure 83 reachable again Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0...
Page 118: Radius Server Authentication With Vsa
ARAP-Zone-Access Acct-Authentic Acct-Delay-Time Acct-Input-Gigawords Acct-Input-Octets Acct-Input-Packets Acct-Link-Count Acct-Multi-Session-Id Acct-Output-Gigawords Acct-Output-Octets Acct-Output-Packets Acct-Session-Id Acct-Session-Time Acct-Status-Type Acct-Terminate-Cause Acct-Tunnel-Packets-Lost Add-Port-To-IP-Address Dell-AP-Group Dell-Admin-Role Dell-Essid-Name Dell-Location-Id Dell-Named-User-Vlan Dell-Port-Id Dell-Priv-Admin-User Dell-Template-User Dell-User-Role Dell-User-Vlan Dell-Auth-Survivability Dell-AS-User-Name Dell-AS-Credential-Hash Authentication Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 119 Event-Timestamp Exec-Program Exec-Program-Wait Expiration Fall-Through Filter-Id Framed-AppleTalk-Link Framed-AppleTalk-Network Framed-AppleTalk-Zone Framed-Compression Framed-IP-Address Framed-IP-Netmask Framed-IPX-Network Framed-MTU Framed-Protocol Framed-Route Framed-Routing Full-Name Group Group-Name Hint Huntgroup-Name Idle-Timeout Login-IP-Host Login-LAT-Node Login-LAT-Port Login-LAT-Service Login-Service Login-TCP-Port Menu Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Authentication...
Page 120: Management Authentication Settings
Vendor-Specific Management Authentication Settings Use this page to specify authentication for access to the Virtual Controller Management user interface. 1. Navigate to the Settings link in the Dell W-Series Instant UI. Authentication Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 121: Captive Portal
Internal— Select to specify a single set of user credentials. Enter the Username and Password for accessing the Virtual Controller Management User Interface. RADIUS Server— Specify one or two RADIUS servers to authenticate the Dell W-Series Instant UI. If two servers are configured users can use them in primary/backup mode or load- balancing mode, this is identical to the RADIUS server configuration for SSIDs.
Page 122: Configuring Internal Captive Portal Authentication When Adding A Guest Network
132. 7. Select Disabled or Enabled from the MAC authentication drop-down list to disable or enable the MAC authentication. For information on MAC authentication, see "MAC Authentication" on page 133. Authentication Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 123: Configuring Internal Captive Portal Authentication When Editing A Guest Network
3. Navigate to the Security tab and select one of the following options for the splash page type: a. Internal — Authenticated b. Internal — Acknowledged c. External — RADIUS Server d. External — Authentication Text e. None "Guest Network" on page 60 for more information. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Authentication...
Page 124: Configuring Internal Captive Portal With External Radius Server Authentication When Adding A Guest Network
New to add a RADIUS server. For information on configuring external RADIUS server, see "External RADIUS Server" on page 112. 7. Click Next and then click Finish. Authentication Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 125 To change the policy text, click the second square in the splash page, type the required text in the Policy text box, and click OK. The policy text should not exceed 255 characters. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 126: Customizing A Splash Page
The edit link for the network appears. 2. Click the edit link. The Edit window for the network appears. 3. Navigate to Security tab and select None from the Splash page type drop-down list. Authentication Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 127: External Captive Portal
4. Click Next and then click Finish. External Captive Portal Dell W-Instant supports external captive portal authentication. The external portal can be on the cloud or on a server outside the enterprise network. Configuring External Captive Portal Authentication when Adding a Guest Network...
Page 128 113 for more details on server settings. 9. Reauth interval — When set to a value greater than zero, the Access Points periodically reauthenticate all associated and authenticated clients. Authentication Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 129: Configuring External Captive Portal Authentication When Editing A Guest Network
11. Max authentication failures— Users who fail to authenticate the number of times specified here are dynamically blacklisted. The maximum value for this entry is 10. Navigate to PEF > Blacklisting in the Dell W-Series Instant UI to specify the duration of the blacklisting on the Blacklisting tab of the PEF window.
Page 130 Encryption— Select Enabled from the drop-down list and perform the following steps (these steps are optional). Select the required key management option from the Key management drop-down list. Available options are: Authentication Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 131: External Captive Portal Authentication Using Clearpass Guest
4. Use the VLAN tab to specify how the clients on this network get their IP address and VLAN. 5. Click Next to continue. 6. In the Security tab, select External- RADIUS Server and update the following fields. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 132: Wispr Authentication
ClearPass Guest RADIUS Web Login page. For example, if the Page Name is Dell, then the URL should be /Dell.php in the Instant c. Enter the Port number (generally should be 80). The ClearPass Guest server uses this port for HTTP services.
Page 133: Mac Authentication
1. In the Dell W-Series Instant UI, click Settings in the top-right corner, then select the WISPr tab. 2. Enter the ISO Country Code section of the WISPr Location ID in the ISO Country Code text box. 3. Enter the E.164 Area Code section of the WISPr Location ID in the E.164 Area Code text box.
Page 134: Configuring Mac Authentication
Walled garden access is needed when an external captive portal is used. A common example could be a hotel environment where unauthenticated users are allowed to navigate to a designated login Authentication Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 135 Instant AP sends an HTTP 403 response to the client with a simple error message. If the requested URL neither appears on the blacklist or whitelist list then the request is redirected to the external captive portal. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 136: Mac + 802.1X Authentication
Select the check box Perform MAC authentication before 802.1X if you want to use 802.1X authentication only when MAC authentication is successful. b. Select the check box MAC authentication fail-thru if you want to use 802.1X authentication even when the MAC authentication fails. Authentication Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 137: Mac + Captive Portal Authentication
Select the check box Enforce MAC Auth Only Role when MAC authentication is enabled for Captive Portal. After successful MAC authentication, MAC auth only role is assigned to the client. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 138: Wired Authentication On A W-Iap
802.1X Wired Authentication To configure wired authentication on a W-IAP: 1. Click the Wired link on the upper right corner of the Dell W-Series Instant UI. 2. Click on the Network assignments drop-down lists to apply an existing Ethernet downlink profile to the Ethernet ports.
Page 139: Loading Certificates Using Dell W-Series Instant Ui
"Loading Certificates using Dell W-Series Instant UI" on page 139 for further instructions. 2. Dell PowerConnect W-AirWave: Navigate to Device Setup > Certificate and then click Add New Certificate. Refer to "Loading Certificates using Dell PowerConnect W-AirWave" on page 140 for further instructions.
Page 140: Loading Certificates Using Dell Powerconnect W-Airwave
Certificate Successfully Installed window appears. Loading Certificates using Dell PowerConnect W-AirWave You can now manage W-Instant AP certificates using the Dell PowerConnect W-AirWave Management server (AMP). The AMP directly provision the certificates for basic certificate verification (i.e certificate type, format, version, serial number etc) before accepting the certificate and uploading to a ...
Page 141 - Loading Certificate via Dell PowerConnect W-AirWave Figure 100 3. Select the appropriate Format that matches the certificate file name. Select Server Cert certificate Type, and provide the passphrase if you want to upload a Server certificate. Select either Intermediate CA or Trusted CA certificate Type, if you want to upload a CA certificate.
Page 142 - Virtual Controller Certificate Figure 104 6. Click Save to apply the changes only to Dell PowerConnect W-AirWave. Click Save and Apply to apply the changes to the Instant AP. NOTE: To unselect the certificate options, click Revert.
Page 143: Encryption
AES in Wi-Fi leverages 802.1X or PSKs to generate per station keys for all devices. AES provides a high level of security, similar to what is used by IP Security (IPsec) clients. Dell recommends that all devices that cannot support AES be upgraded or replaced so that they are capable of AES encryption.
Page 144: Understanding Wpa And Wpa2
AES if possible, TKIP or WEP if necessary Voice Network or 802.1X or PSK as (combine with restricted Handheld devices supported by the device policy enforcement firewall (PEF) user role). Encryption Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 145: Role Derivation
Chapter 12 Role Derivation Every client in a Dell W-Instant network is associated with a user role, which determines the client’s network privileges, how often it must re-authenticate, and which bandwidth contracts are applicable. This section describes creating and assigning roles using the Dell W-Series Instant UI.
Page 146 "Examples for Access Rules" on page 158 for procedures to create access rules. 3. Select Enforce Machine Authentication and specify these two roles. 4. Click Finish to apply these changes. Role Derivation Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 147: Creating Role Assignment Rules
MAC-Address Attribute The first three octets in a MAC address are known as Organizationally Unique Identifier (OUI), and are purchased from the Institute of Electrical and Electronics Engineers, Incorporated (IEEE) Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Role Derivation...
Page 148: Dhcp Option And Dhcp Fingerprinting
802.1X authentication. NOTE: When creating more than one role assignment rule based on RADIUS attributes, a DHCP option, and 802.1X-authentication-type, the first matching rule in the rule list is applied. Role Derivation Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 149: User Vlan Derivation
Guest SSID network Vendor Specific Attributes (VSA) When an external RADIUS server is used, the user VLAN can be derived from the Dell-User-Vlan VSA. The VSA is then carried in an Access-Accept packet from the RADIUS server. The W-IAP can analyze the return message and derive the value of the VLAN which it assigns to the user.
Page 150: Vlan Derivation Rule
The rule assigns the user to a VLAN based on the attributes returned by the RADIUS server when the user is authenticated and the MAC address of the user. User VLAN Derivation Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 151: User Role
If the VSA and VLAN derivation rules are not matching, then the user VLAN can be derived by a user role. Configuring a User Role 1. Click the PEF link at the top right corner of Dell W-Series Instant UI. 2. Select Roles tab. 3. Click the New button under roles.
Page 152: Ssid Profile
- Configuring VLAN Derivation using the User Role Figure 112 To use a defined user VLAN role: 1. Select a network on the Dell W-Series Instant UI and click on the edit link. 2. Select the Access tab 3. Under role-based, select the defined role.
Page 153: Configuring Vlan Derivation Rules Using An Ssid Profile
To configure VLAN derivation rules on a W-IAP: 1. Select a network on the Dell W-Series Instant UI and click on the edit link. 2. Select the VLAN tab and check the static radio button under the client VLAN assignment.
Page 154 User VLAN Derivation Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 155: Instant Firewall
Dell W-Instant implements a W-Instant Firewall feature that uses a simplified firewall policy language. An administrator can define the firewall policies on an SSID or wireless LAN such as the Guest network or an Employee network.
Page 156: Service Options
Figure 115 Service Options Table 21 lists the set of service options available in the Dell W-Series Instant UI. You can allow or deny access to any or all of these services depending on your requirements. - Network Service Options...
Page 157 Point-to-Point Tunneling Protocol rtsp Real Time Streaming Protocol sccp Skinny Call Control Protocol Session Initiation Protocol sip-tcp Session Initiation Protocol-Transmission Control Protocol sip-udp Session Initiation Protocol-User Datagram Protocol Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Instant Firewall...
Page 158: Destination Options
Trivial file transfer protocol Destination Options Table 22 lists the destination options available in the Dell W-Series Instant UI. You can allow or deny access to any or all of these destinations depending on your requirements. Table 22 - Destination Options...
Page 159: Allow Pop3 Service To A Particular Server
3. Use the VLAN tab, to specify how the clients on this network get their IP address and VLAN.Click Next to continue. 4. Click Next and slide to set the appropriate security levels in the Security tab. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 160: Deny Ftp Service Except To A Particular Server
Select ftp from the Service drop-down list. d. Select except to a particular server from the Destination drop-down list and enter appropriate IP address in the IP text box. e. Click OK Instant Firewall Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 161: Deny Bootp Service Except To A Particular Network
Select except to a network from the Destination drop-down list. Enter the appropriate IP address in the IP text box. Enter the appropriate netmask in the Netmask text box. e. Click OK. 6. Click Finish. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Instant Firewall...
Page 162 - Defining Rule — Deny bootp Service Except to a Network Figure 119 Instant Firewall Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 163: Content Filtering
When enabled, all DNS requests to non-corporate domains on this wireless network are sent to the open DNS server. NOTE: Regardless of whether content filtering is disabled or enabled, instant.dell-pcw.com is always resolved internally on W-Instant. Enabling Content Filtering To enable content filtering per SSID: 1.
Page 164: Enterprise Domains
- Enabling Content Filtering Figure 120 The content filtering configuration applies to all the W-IAPs in the Dell W-Instant network and the service is enabled or disabled globally across all the wireless networks that are configured in the Dell W-Series Instant UI.
Page 165 To manually add or delete a domain, perform the following steps. 1. Navigate to Settings at the top right corner of the Dell W-Series Instant UI and then select Enterprise Domains in the UI. 2. Click New and enter a New Domain Name or select the domain and click Delete to remove the domain name from the list.
Page 166 Content Filtering Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 167: Os Fingerprinting
OS Fingerprinting The OS Fingerprinting feature gathers information about the client that is connected to the Dell W-Instant network to find the operating system that the client is running on. The following is a list of advantages of this feature: Identifying rogue clients—...
Page 168 OS Fingerprinting Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 169: Adaptive Radio Management
ARM Features This section describes ARM features that are available in Dell W-Instant. Channel or Power Assignment This feature automatically assigns channel and power settings for all the W-IAPs in the network according to changes in the RF environment.
Page 170: Airtime Fairness Mode
Fair Access— Allocates Airtime evenly across all the clients Preferred Access— 11n clients get more airtime than 11a/11g, which get more airtime than 11b. The ratio is 16:4:1. - Airtime Fairness Mode Figure 123 Adaptive Radio Management Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 171: Access Point Control
This feature allows administrators to configure 40 MHz channels in the 2.4 GHz and 5.0 GHz bands. 40 MHz channels are essentially two 20 MHz adjacent channels that are bonded together. 40 MHz channel effectively doubles the frequency bandwidth available for data transmission. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 172: Monitoring The Network With Arm
ARM-assigned channel to provide a snapshot of the current RF health state. Configuring Administrator Assigned Radio Settings for W-IAP Adaptive Radio Management (ARM) is enabled on Dell W-Instant by default. It automatically assigns appropriate channel and power settings for the W-IAPs. To manually configure radio settings: 1.
Page 173: Configuring Radio Profiles In Instant
8. Click OK. Configuring Radio Profiles in Instant Dell W-Instant supports radio profile configuration. The radio settings are available for both the 2.4-GHz and the 5-GHz radio profiles. You can configure the radios separately, using the parameters described in table on each radio.
Page 174 - Radio Profile Figure 125 1. Navigate to RF which is at the top right corner of the Dell W-Series Instant UI. 2. Click Show advanced options to view the Radio tab. 3. Refer to the table below to configure the radio settings for bands 2.4 GHz and 5 GHz.
Page 175 NOTE: Reboot the W-IAP after configuring the radio profile settings in order for the changes to take effect. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Adaptive Radio Management...
Page 176 Adaptive Radio Management Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 177: Intrusion Detection System
However, an interfering AP may be reclassified as a rogue AP. Navigate to IDS in the Dell W-Series Instant UI and click the IDS link. The built-in IDS scans for access points that are not controller by this Virtual Controller. These are listed below and classified as either Interfering or Rogue, depending on whether they are on a foreign network or your network.
Page 178 Detect AP Impersonation Detect Adhoc Networks Detect Valid SSID Misuse High Detect Wireless Bridge Detect 802.11 40MHz intolerance settings Detect Active 802.11n Greenfield Mode Detect AP Flood Attack Intrusion Detection System Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 179 IDS Signature— Air Jack IDS Signature— ASLEAP Three levels of detection can be configured in the WIP Protection page— Off, Low, and High (as shown in Figure 128). Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Intrusion Detection System...
Page 180 The following table describes the detection policies that are enabled in the Client Protection Custom settings field. - Client Protection Policies Table 28 Detection Level Detection Policy All detection policies are disabled Protect Valid Station High Protect Windows Bridge Intrusion Detection System Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 181: Containment Methods
W-Instant network. W-Instant supports the following types of containment mechanisms: Wired containment— When enabled, Dell Access Points generate ARP packets on the wired network to contain wireless attacks. Wireless containment— When enabled, the system attempts to disconnect all clients that are connected or attempting to connect to the identified Access Point.
Page 182 Intrusion Detection System Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 183: Snmp
SNMPV1 and SNMPV2 between the Virtual Controller and the SNMP agent. If you are using SNMPv3 to obtain values from the Dell W-Instant, you can configure the following parameters: Name A string representing the name of the user.
Page 184 Retype text box. 8. Click OK. To edit the details for a particular user, select the user and click Edit. To delete a particular user, select the user and click Delete. SNMP Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 185: Snmp Traps
- Creating Users for SNMPV3 Figure 131 SNMP Traps Dell W-Instant supports the configuration of external trap receivers in the Dell W-Series Instant UI. Only the W-IAP acting as the Virtual Controller generates traps. The OID of the traps is 1.3.6.1.4.1.14823.2.3.3.1.200.2.X.
Page 186 NOTE: Dell-specific management Information bases (MIBs) describe the objects that can be managed using SNMP. See the Dell PowerConnect W-Series Instant Access Point 6.2.0.0- 3.2.0.0 MIB Reference Guide for information about the Dell MIBs and SNMP traps. SNMP Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0...
Page 187: Ethernet Downlink
Ethernet port2 on W-IAP3WNP. Admin Status Displays the status of the admin. The following figure displays the wired parameters of the Ethernet profile configuration: Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Ethernet Downlink...
Page 188 The following figure displays the VLAN parameters of the Ethernet profile configuration: - Ethernet Profile Configuration — VLAN Tab Figure 134 4. Click on Security tab or click on Next and enter the following information: Ethernet Downlink Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 189 NOTE: This release of W-Instant supports configuration of up to 64 access rules. The following figure displays the access parameters of the Ethernet profile configuration: Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Ethernet Downlink...
Page 190: Assigning A Profile To The Ethernet Port
Assigning a Profile to the Ethernet Port You can assign the configured profiles to the Ethernet ports under the Network Assignments window. To assign an Ethernet downlink profile to Ethernet 0 port: Ethernet Downlink Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 191 To assign an Ethernet downlink profile to Ethernet 2 port, select the profile from the 0/2 drop down list. - Assigning a Profile to the Ethernet Ports Figure 138 Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Ethernet Downlink...
Page 192 Ethernet Downlink Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 193: Hierarchical Deployment
AP must use the 3G uplink. In this release of Dell W-Instant, you can form a W-IAP network by connecting the downlink port of an AP to other APs. Only one AP in the network uses its downlink port to connect to the other APs.
Page 194 Hierarchical Deployment Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 195: Uplink Configuration
The Ethernet 0 port on a W-IAP is enabled as an uplink port by default. NOTE: Instant does not support configuration of an Eth0 uplink. View the type of uplink and the status of the uplink in the Dell W-Series Instant UI in the Info tab.
Page 196: 3G/4G Uplink
- List of Supported 3G Modems Table 35 Modem Type Supported 3G Modems USBConnect 881 (Sierra 881U) Quicksilver (Globetrotter ICON 322) UM100C (UTstarcom) True Auto Detect Icon 452 Aircard 250U (Sierra) USB 598 (Sierra) Uplink Configuration Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 197 Huawei E176G (Telstra (Aus)) Huawei E1553, E176 (3/HUTCH (Aus)) Huawei K4505 (Vodafone/SmarTone (HK)) Huawei K4505 (Vodafone (UK)) ZTE MF656 (Netcom (norway)) ZTE MF636 (HK CSL/1010) ZTE MF633/MF636 (Telstra (Aus)) Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Uplink Configuration...
Page 198: Provisioning 3G/4G Uplink Manually
Provisioning 3G/4G Uplink Manually To provision a 3G/4G uplink manually, configure the modem parameters. The W-IAP has to be rebooted if you configure USB modem parameter from the Dell W-Series Instant UI. Use the following procedure to provision 3G/4G uplink manually: 1.
Page 199: Provisioning 3G Uplink Automatically
- Provisioning 3G Uplink— Automatically NOTE: In the Dell W-Series Instant UI, you can view the list of country or ISP in the country and ISP drop-down lists. You can either use the country or ISP to configure the modem, or configure the individual modem parameters manually.
Page 200: Wi-Fi Uplink
6. Enter a pre-shared key (PSK) passphrase in the Passphrase text box. 7. Click OK. - Provisioning Wi-Fi Uplink Figure 145 Provisioning 3G/4G and Wi-Fi Uplink with Factory Setting Once the W-IAP is rebooted with the factory setting: Uplink Configuration Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 201: Uplink Management
2. Provision the W-IAP for 3G/4G or Wi-Fi uplink (Refer to the above sections). Uplink Management W-Instant allows you to set preferences for uplink preemption and switchover. The following figure shows the fields in the Dell W-Series Instant UI, which can be used for configuring the uplink preferences. Figure 146...
Page 202: Uplink Switching Based On Internet Connectivity Status
Configuring PPPoE To configure the PPPOE settings: 1. Click the Settings link at the upper right corner of the Dell W-Series Instant UI. 2. Click the Show advanced options link. 3. In the Uplink tab, perform the following steps in the PPPoE section:...
Page 203 In the Password and Retype fields, enter the PPPoE password and confirm it. 4. Click OK. 5. Reboot the IW-IAP for the configuration to take effect. - PPPoE Settings Figure 147 Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Uplink Configuration...
Page 204 Uplink Configuration Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 205: Dell Powerconnect W-Airwave Integration And Management
Dell W-IAPs communicate with Dell PowerConnect W-AirWave using the HTTPS protocol. This allows an Dell PowerConnect W-AirWave server to be deployed in the cloud across a NAT device, such as a router. Dell PowerConnect W-AirWave Features This section describes the Dell PowerConnect W-AirWave features that are available in the Dell ...
Page 206: Trending Reports
Figure 148 Trending Reports Dell PowerConnect W-AirWave saves up to 14 months of actionable information, including network performance data and user roaming patterns, so you can analyze how network usage and performance trends have changed over time. It also provides detailed capacity reports with which you can plan the capacity and appropriate strategies for your organization.
Page 207: Rf Visualization Support For Dell W-Instant
Creating your Organization String The Organization String is a set of colon-separated strings created by the Dell PowerConnect W- AirWave administrator to accurately represent the deployment of each Dell W-Instant system. This string is entered into the Dell W-Series Instant UI by the on-site installer.
Page 208: About Shared Key
In networks that are not using DHCP option 60 and 43, it is easy to use the standard DHCP options 60 and 43 for Dell AP or Dell W-Instant AP. For Dell APs these options can be used to Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0...
Page 209 1. From a server running Windows Server 2008 navigate to Server Manager > Roles > DHCP sever > domain DHCP Server > IPv4. 2. Right-click on IPv4 and select Set Predefined Options. - Instant and DHCP options for Dell PowerConnect W-AirWave— Set Predefined Figure 151 Options 3.
Page 210 - W-Instant and DHCP options for Dell PowerConnect W-AirWave— Predefined Figure 152 Options and Values 4. Navigate to Server Manager and select Server Options in the IPv4 window. (This sets the value globally. Use options on a per-scope basis to override the global options.) 5.
Page 211 - W-Instant and DHCP options for Dell PowerConnect W-AirWave— Server Figure 153 Options 6. Select 060 Dell W-Instant AP in the Server Options window and enter DellInstantAP in the String Value. - W-Instant and DHCP options for Dell PowerConnect W-AirWave—060 Dell W-...
Page 212: Alternate Method For Defining Vendor-Specific Dhcp Options
Options Alternate Method for Defining Vendor-Specific DHCP Options This section describes how to add vendor-specific DHCP options for Dell W-Instant APs in a network that already uses DHCP options 60 and 43 for other services. Some networks use DHCP standard options 60 and 43 to give the DHCP clients info about certain services such as PXE to the DHCP clients.
Page 213 This method describes how to set up a DHCP server to send option 43 with Dell PowerConnect W-AirWave information to Dell W-Instant W-IAP. This section assumes that option 43 is sent per scope because option 60 is being shared by other devices as well.
Page 214 - Dell PowerConnect W-AirWave — New Group Figure 158 - Dell PowerConnect W-AirWave —Monitor Figure 159 Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 215: Airgroup
Apple TVs. An administrator can grant global access to each device, or restrict access according to the username, role, or user location. NOTE: Dell AirGroup is a technology which is made available as part of the Dell W- "Enabling or Disabling AirGroup" on page 220 Instant 6.2.0.0-3.2.0.0 version.
Page 216: Wlans And Bonjour
Or, in a classroom, teachers can use AirPlay to wirelessly project a laptop screen onto an HDTV monitor using an Apple TV. AirGroup is aware of the location of services through Dell CPPM (Dell PowerConnect W- ClearPass Policy Manager) support. For example, depending on proximity, an iPad would be presented with the closest printer instead of all the printers in the building.
Page 217: Airgroup Features
Match users’ devices, such as iPads, to their closest Bonjour devices, such as printers. This requires CPPM support. Dell PowerConnect W-ClearPass Policy Manager and ClearPass Guest Features Registration portal for WLAN users to register their personal devices, such as Apple TVs and printers.
Page 218: How Does Airgroup Work
2. Dell W-Instant maintains state information for all mDNS services. Dell W-Instant queries Dell PowerConnect W-ClearPass Policy Manager to map each device’s access privileges to available services. 3. Dell W-Instant responds back to the query made by a device based on contextual data – user role, username, and location. AirGroup Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0...
Page 219: Use Case: Higher Education Wireless Lan
- AirGroup in a Higher-Education Environment Figure 162 The AirGroup Solution Components The components that make up the AirGroup Solution include the Dell W-Instant, Dell PowerConnect W-ClearPass Policy Manager, and Dell PowerConnect W-ClearPass Guest. The version requirements are described below: Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0...
Page 220: Configuring Airgroup On W-Instant
IAP AirGroup supports two default services i.e. AirPlay and AirPrint. Using the Dell W-Series Instant UI Enabling or Disabling AirGroup As the first step in configuring AirGroup services, you must enable AirGroup in the Dell W-Series Instant UI. 1. Go to Settings > Air Group to enable this feature.
Page 221: Disallow Role
AirGroup services. Perform the following steps to configure disallow role from accessing AirPrint servers and disallow learning of AirPrint servers on the configured VLAN as shown in Figure 164 Figure 165. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide AirGroup...
Page 222: Disallow Vlan
1. Select Edit (the field next to Air Print disallowed VLANs). The Air Print Disallowed VLANs window appears. 2. Enter the VLANs on which you want to disallow learning of AirGroup services. 3. Click OK to apply these changes. AirGroup Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 223: Configuring Airgroup-Cppm Interface In W-Instant
2. Assign a server to AirGroup. 3. Configure CPPM to enforce registration. Creating a RADIUS Server Navigate to the PEF link at the top right corner of the Dell W-Series Instant UI to configure an external RADIUS server for a wireless network. Figure 166 - New Authentication Server 1.
Page 224: Assign A Server To Airgroup
NOTE: Alternatively, you can also create a RADIUS server in the Air Group window of the Dell W-Series Instant UI. Navigate to Settings > Show advanced options > AirGroup > Clear Pass Settings > CPPM server 1> and select New from the drop-down menu.
Page 225: Configure Cppm To Enforce Registration
To configure the CoA only server follow the steps below: 1. Navigate to the PEF link at the top right corner of the Dell W-Series Instant UI and click New. NOTE: Ensure to configure CPPM server and the AirGroup W-IAP with the same AirGroup RFC-3576 UDP port.
Page 226: Airgroup Monitoring
MDNS Cache— By clicking on this, you receive MDNS record details of a particular server. Troubleshooting and Log Messages Navigate to the Support window at the top right corner of the Dell W-Series Instant UI. Select the required AirGroup command from the Command drop-down list and click Run.
Page 227 VC AirGroup Status— Displays the enable/disable status of the AirGroup and the parameters of the CPPM servers for the selected W-IAP(s). VC AirGroup vlan— Displays the AirGroup status information for a VLAN of the selected W- IAP(s). Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide AirGroup...
Page 228 AirGroup Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 229: Monitoring
226. Virtual Controller View The Virtual Controller view is the default view.This view allows you to monitor the Dell W-Instant network. The following Dell W-Series Instant UI elements are available in this view: Tabs— Contains three tabs— Networks, Access Points, and Clients. For detailed information about the tabs, see "Dell ...
Page 230: Monitoring Link
Instant Access Points, Utilization, Noise, and Errors information about the W-IAPs in the Dell W-Instant network. If utilization, noise or errors of a W-IAP are not within the specified threshold, the W-IAP name appears as a link. Click the link to monitor the W-IAP. For more information, see "Dell ...
Page 231 Virtual To see an enlarged view, click the Controller for the last 15 minutes, graph. 1. Log in to the Dell W-Series The enlarged view provides Last, Instant UI. The Virtual Controller Clients Minimum, Maximum, and Average view appears.
Page 232: Client Alerts Link
"IDS" on page Network View All Wi-Fi networks in the Dell W-Instant network are listed in the Networks tab. Click the network that you want to monitor. Network View for the selected network appears. Similar to the Virtual Controller view, the Network view also has three tabs— Networks, Access Points, and Clients.
Page 233: Info
Security level— The type of user authentication and data encryption for this network. Usage Trends The Usage Trends section displays the following graphs for the selected network: Clients - Clients Graph Figure 175 Throughput Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Monitoring...
Page 234 The Clients graph shows the number of last 15 minutes, clients associated with the network for 1. Log in to the Dell W-Series the last 15 minutes. Instant UI. The Virtual Controller To see an enlarged view, click the view appears.
Page 235: - Dell W-Instant Access Point View
Dell W-Instant Access Point View All W-IAPs in the Dell W-Instant network are listed in the Access Points tab. Click the W-IAP that you want to monitor. Access Point view for that W-IAP appears. Similar to the Virtual Controller view, the Access Point view also has three tabs— Networks, Access Points, and Clients.
Page 236: Overview
15 minutes. The following graphs are displayed for the selected W-IAP: Neighboring APs Figure 178 - Neighboring APs Graph CPU Utilization - CPU Utilization Graph Figure 179 Neighboring Clients - Neighboring Clients Graph Figure 180 Memory Free (MB) Monitoring Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 237 Figure 183 - Throughput Graph For more information about the graphs in the instant access point view and or monitoring procedures, see Table - Dell W-Instant Access Point View — Usage Trends and Monitoring Procedures Table 41 Graph Name Description Monitoring Procedure...
Page 238 W-IAP at 12:04 hours. To check the CPU utilization of the W-IAP for the last 15 minutes, 1. Log in to the Dell W-Series Instant UI. The Virtual Controller view appears. This is the default The CPU Utilization graph displays the view.
Page 239 W-IAP for the clients associated with the selected last 15 minutes, W-IAP for the last 15 minutes. 1. Log in to the Dell W-Series To see an enlarged view, click the Instant UI. The Virtual Controller graph. The enlarged view provides view appears.
Page 240 Drops (fps) - Drops (fps) Graph Figure 186 Noise Floor (dBm) - Noise Floor (dBm) Graph Figure 187 2.4 GHz Mgmt Frames - 2.4 GHz Management Frames (fps) Graph Figure 188 Monitoring Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 241 To see the graphs for the 5 GHz band, click the 5 GHz link. For more information about the graphs in the instant access point view and for monitoring procedures, see Table - Dell W-Instant Access Point View — RF Trends Graphs and Monitoring Table 42 Procedures Graph...
Page 242 To monitor the number of frames dropped for the last 15 minutes, 1. Log in to the Dell W-Series Instant UI. The Virtual Controller view appears. This is the default The Drops graph shows dropped view.
Page 243: Client View
Errors graph for the selected W-IAP. Client View In the Virtual Controller view, all clients in the Dell W-Instant network are listed in the Clients tab. Click the IP address of the client that you want to monitor. Client view for that client appears.
Page 244: Info
RF information for the W-IAP to which the client is connected to. RF Trends The RF Trends section displays the following graphs for the selected client: Signal - Signal Graph Figure 191 Monitoring Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 245 Figure 192 Speed - Speed Graph Figure 193 Throughput - Throughput Graph Figure 194 For more information about RF trends graphs in the client view and for monitoring procedures, Table Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Monitoring...
Page 246 To monitor the signal strength of the selected client for the last 15 minutes, The Signal graph shows the signal 1. Log in to the Dell W-Series strength of the client for the last 15 Instant UI. The Virtual Controller minutes. It is measured in decibels.
Page 247: Mobility Trail
Association Time— The time at which the selected client was associated with a particular W- IAP. The Dell W-Series Instant UI shows the client-W-IAP association over the last 15 minutes. Access Point— W-IAP name with which the client was associated.
Page 248 Monitoring Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 249: Alert Types And Management
802.1X related mode and key mismatch, server, and client time-out failure alerts. IP address related failure - Static IP address or DHCP related alerts. Table 44 displays a list of alerts that are generated on the Dell W-Instant network. - Alerts List Table 44...
Page 250 This client did not receive Check the status of the DHCP request timed 100511 a response to its DHCP DHCP server in the request in time. network. Alert Types and Management Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 251: Policy Enforcement Firewall
The PEF window displays the external/internal authentication servers, currently defined roles for all the networks, blacklisted clients and to enable or disable the protocols for ALG. Navigate to the PEF link at the top right corner of the Dell W-Series Instant UI to view the following features.
Page 252: Roles
Access Rules— This table lists the permissions for each Role. See "Role Derivation" on page for more information. NOTE: This release of W-Instant supports configuration of up to 64 access rules. Policy Enforcement Firewall Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 253: Extended Voice And Video Functionalities
W-IAP cannot determine which dynamic ports are used for voice or video traffic. In these cases, the W-IAP has to use an ACL with the Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0...
Page 254: Microsoft Ocs
- Ports Used by the Apple Facetime Application Table 45 Port Packet Type TCP/UDP 3478-3497 5223 16384-16387 16393-16402 The following screenshots are configuration examples for Microsoft OCS and Apple Facetime applications. Policy Enforcement Firewall Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 255: Client Blacklisting
The client blacklisting denies connectivity to the blacklisted clients. When a client is blacklisted in an Dell W-IAP, the client is not allowed to associate with the W-IAP in the network. If a client is connected to the network when it is blacklisted, a deauthentication message is sent to force the client to disconnect.
Page 256: Types Of Client Blacklisting
2. Click on the New button under the Manual Blacklisting window. 3. Enter the MAC address of the client to be blacklisted in the MAC address to add text box. Policy Enforcement Firewall Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 257: Dynamic Blacklisting
SSID. To enable session firewall based blacklisting, click New and navigate to WLAN Settings > VLAN > Security > Access window and enable the Blacklist option of the corresponding ACL rule. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 258: Pef Settings
Instant firewall now supports the ALG (Application Layer Gateway) functions such as SIP, Vocera, Alcatel NOE, and Cisco Skinny protocols. To enable or disable the protocols for ALG in Dell W-Instant perform the following steps: 1. Select PEF from the top right of the Dell W-Series Instant UI.
Page 259: Firewall-Based Logging
Firewall-based Logging W-Instant firewall now supports firewall based logging function. The firewall logs on the W- Instant APs are generated as syslog messages. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Policy Enforcement Firewall...
Page 260 Policy Enforcement Firewall Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 261: Vpn Configuration
Mobility Controller. The controller solely acts as a VPN end-point and does not supply the W- Instant AP with any configuration. To create a VPN tunnel from the Virtual Controller to the Dell PowerConnect W-Series Mobility Controller: - Tunneling— Controller...
Page 262: Fast Failover
1. Navigate to the VPN link at the top right corner of the Dell W-Series Instant UI. The Tunneling window appears. 2. Select IPSec from the Protocol drop-down list. 3. If you select GRE from the Protocol drop-down list then the packets are sent and received without encryption.
Page 263: Dhcp Server Configuration
VLAN configured in this subnet to the controller VLAN multicast table enabling the L2 subnet to act as an extension of the VLAN on the controller. Corporate traffic is sent on the IPSec tunnel and non-corporate traffic is sent on the uplink. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 264: Nat Dhcp Configuration
Netmask— Net mask of the subnet. This along with Network determines the size of the subnet. DNS server— An optional field which defines the DNS server. Domain name— An optional field which defines the domain name. VPN Configuration Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 265: Distributed L2 Dhcp Configuration
For the current phase of W-IAP, it is important that this value is configured consistent across all branches. DNS server— An optional field which defines the DNS server. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide VPN Configuration...
Page 266: Distributed L3 Dhcp Configuration
Domain name— An optional field which defines the domain name. Lease time— An optional field which defines the lease time for client 2. Click OK to apply these changes. VPN Configuration Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 267: Centralized L2 Dhcp Configuration
NOTE: The Option 82 is specific to Alcatel and is not configurable in this version of W- Instant. The following table describes the behavior of DHCP Relay Agent and Option 82 in the W-IAP. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 268 ALU-specific Option 82 string DHCP packet not relayed, but broadcasted without the Disabled Disabled ALU-specific Option 82 string 2. Click OK to apply these changes. - Centralized L2 DHCP Configuration Figure 211 VPN Configuration Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 269: User Database
NOTE: The User Database is also used when Instant is employed as an internal RADIUS server. Adding a User To add a user: 1. At the top right corner of the Dell W-Series Instant UI, click the PEF link and click Users for Internal Server. - Adding a User Figure 212 2.
Page 270: Editing User Settings
Deleting a User To delete a user: 1. At the top right corner of the Dell W-Series Instant UI, click the Users link. The Users window appears. 2. In the Users section, select the username that you want to delete and click Delete.
Page 271: Regulatory Domain
The initial Wi-Fi setup requires you to specify the country code for the country in which the Dell W-Instant operates. This configuration sets the regulatory domain for the radio frequencies that the W-IAPs use. Within the regulated transmission spectrum, a high-throughput 802.11a, 802.11b/g, or 802.11n radio setting can be configured.
Page 272 Switzerland Czech Republic Spain United Kingdom Republic of Korea (South Korea) China France Hong Kong Singapore Taiwan Brazil Saudi Arabia Lebanon United Arab Emirates South Africa Argentina Australia Austria Regulatory Domain Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 273 Greece Iceland India Ireland Kuwait Liechtenstein Lithuania Mexico Morocco New Zealand Poland Puerto Rico Slovak Republic Slovenia Thailand Uruguay Panama Russia Kuwait Liechtenstein Lithuania Mexico Morocco New Zealand Poland Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Regulatory Domain...
Page 274 Thailand Uruguay Panama Russia Egypt Trinidad and Tobago Turkey Costa Rica Ecuador Honduras Kenya Ukraine Vietnam Bulgaria Cyprus Estonia Mauritius Romania Serbia and Montenegro Indonesia Peru Venezuela Jamaica Bahrain Regulatory Domain Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 275 Code Country Name Oman Jordan Bermuda Colombia Dominican Republic Guatemala Philippines Sri Lanka El Salvador Tunisia Islamic Republic of Pakistan Qatar Algeria Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Regulatory Domain...
Page 276 Regulatory Domain Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 277: Controller Configuration For Vpn
VPN Local Pool Configuration This pool is used to assign an IP Address to the W-IAP after successful VPN authentication. (Dell3400) # ip local pool "rapngpool" <startip> <endip> (Dell3400) # Controller Configuration for Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 278: W-Iap Vpn Profile Configuration
(Dell3400) (config) #aaa authentication vpn default-iap (Dell3400) (VPN Authentication Profile "default-iap") #server-group default (Dell3400) (VPN Authentication Profile "default-iap") #default-role iaprole (Dell3400) (VPN Authentication Profile "default-iap") #! (Dell3400) (config) # Controller Configuration for Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 279: Dell Powerconnect W-Clearpass Configuration For Airgroup
Appendix B Dell PowerConnect W-ClearPass Configuration for AirGroup The purpose of this chapter is to help you configure AirGroup with Dell PowerConnect W- ClearPass 6.0.1. Dell PowerConnect W-ClearPass Setup 1. On Dell PowerConnect W-ClearPass Guest, navigate to Administration > AirGroup Services.
Page 280 1. Navigate to theDell PowerConnect W-ClearPass Policy Manager UI, and navigate to Configuration > Identity > Local Users. Figure 217 - Configuration > Identity > Local Users Selection 2. Click Add User. Dell PowerConnect W-Clear- Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Pass Configuration for AirGroup...
Page 281 5. Now click Add User, and create an AirGroup Operator. - Create an AirGroup Operator Figure 220 6. Click Add to save the user with an AirGroup Operator role. Dell PowerConnect W-Clear- Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Pass Configuration for AirGroup...
Page 282 - Local Users UI Screen Figure 221 8. Navigate to the Dell PowerConnect W-ClearPass Guest UI and click Logout. The ClearPass Guest Login page appears. Use the AirGroup admin credentials to log in. 9. After logging in, click Create Device.
Page 283: Testing
Delete the address from the table— aaa user delete mac 00:aa:22:bb:33:cc 2. Reconnect both devices. To limit access to the AppleTV, access the Dell PowerConnect W- ClearPass Guest UI using either the AirGroup admin or the AirGroup operator credentials. Next, navigate to List Devices > Test Apple TV > Edit. Add a username that is not used to log in to the Apple devices in the Shared With field.
Page 284 Dell PowerConnect W-Clear- Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Pass Configuration for AirGroup...
Page 285: Iap-Vpn
This new architecture and form factor seamlessly adds the survivability feature of W-Instant APs with the VPN connectivity of RAPs — providing corporate connectivity to branches. All Dell controllers that are supported on the DellOS 6.2.0 release will work on IAP-VPN 6.1.3.1. Licensing Requirements...
Page 286: Vpn Configuration
Right-click the policy that you have just created and select Properties. e. In the Settings tab, select the policy condition, and Edit Profile..f. In the Advanced tab, select Vendor Specific, and click Add to add new vendor specific attributes. IAP-VPN Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 287: Vpn Local Pool Configuration
3. Under Firewall Policies, click Add. In Choose from Configured Policies, select the predefined allowall policy. Click Done. 4. Click Apply. For more information on VPN profile configuration, see "VPN Configuration" on page 261. Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide IAP-VPN...
Page 288: Viewing Branch Status
Index assigned to the branch. Status Current status of the branch (UP/DOWN). Inner IP VPN inner IP of the branch. MAC Address MAC address of the VC of the branch. IAP-VPN Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 289: Troubleshooting
Viewing Logs To view the log information for APs: 1. At the top right corner of Dell W-Series Instant UI, click Support. The Support window appears. 2. Select the required option from the Command drop-down list. For example, AP ARM Configuration.
Page 290 AP Interface Counters— Displays the package counters of bond0 of the selected W-IAP. AP Interface Status— Displays the status of br0 of the selected W-IAP. AP Internal DHCP Status AP IP Interface Troubleshooting Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 291 AP Monitor Status— Displays the configuration and status of monitor information of the selected W-IAP. AP Persistent Clients— Displays the persistent clients of the selected W-IAP. AP PPPoE uplink debug AP PPPoE uplink status Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Troubleshooting...
Page 292 VC DHCP Option 43 Received VC Global Alerts— Displays all the alerts about client of the selected W-IAP. VC Global Statistics— Displays the flow information and signal strength of the selected W- IAP. Troubleshooting Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 293 VC Uplink 3G/4G Configuration VC Uplink Management Configuration VC WISPr Configuration — Displays the WISPr configuration details. NOTE: Use the support commands under the supervision of Dell technical support. - Support Commands Figure 224 Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0...
Page 294 Troubleshooting Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...
Page 295: Abbreviations
Intrusion Detection System IEEE Institute of Electrical and Electronics Engineers Internet Service Provider Instant UI Instant User Interface LEAP Lightweight Extensible Authentication Protocol Mail Exchanger Media Access Control Network Access Server Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide Abbreviations...
Page 296 Network Time Protocol PEAP Protected Extensible Authentication Protocol Privacy Enhanced Mail Power over Ethernet RADIUS Remote Authentication Dial In User Service Virtual Controller Vendor-Specific Attributes WLAN Wireless Local Area Network Abbreviations Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 User Guide...

This manual is also suitable for:

Powerconnect b-rx4 Powerconnect w-series

Dell PowerConnect W-IAP3WN User Manual

Quick Links

Troubleshooting

Related Manuals for Dell PowerConnect W-IAP3WN

Summary of Contents for Dell PowerConnect W-IAP3WN